Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31/2eb533dd-af48-3036-afe1-a1d4ebc0f702.roa
File:                     2eb533dd-af48-3036-afe1-a1d4ebc0f702.roa (raw, json)
Hash identifier:          mNY1fpq3726NdAKycmWiPnZl/9r0JHz2UOKqfyYohWU=
Subject key identifier:   AC:E6:6B:1C:9E:B0:16:BA:EA:95:FB:2D:FE:5C:EE:E5:F4:90:C7:BF
Certificate issuer:       /CN=6c0836c5-0c38-41a2-917d-c9df009f1a31
Certificate serial:       010D0C9F4328584B110C0F81B4F71FDE62713140
Authority key identifier: 8E:80:0D:8E:4D:40:B5:8B:65:6F:70:EE:C6:05:6F:BB:47:39:00:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31/2eb533dd-af48-3036-afe1-a1d4ebc0f702.roa
Signing time:             Wed 03 Sep 2025 01:00:33 +0000
ROA not before:           Wed 03 Sep 2025 01:00:33 +0000
ROA not after:            Tue 02 Dec 2025 02:00:33 +0000
asID:                     26277
IP address blocks:        216.108.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31/6c0836c5-0c38-41a2-917d-c9df009f1a31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31/6c0836c5-0c38-41a2-917d-c9df009f1a31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:11:0c:0f:81:b4:f7:1f:de:62:71:31:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c0836c5-0c38-41a2-917d-c9df009f1a31
        Validity
            Not Before: Sep  3 01:00:33 2025 GMT
            Not After : Dec  2 02:00:33 2025 GMT
        Subject: CN=7b92a8b4-5616-45cd-9dc3-cc9610f6729d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:7c:a3:14:10:1a:6f:ab:09:69:4a:b2:d2:60:
                    17:24:04:f6:e0:4f:b9:59:5c:dd:73:64:9c:d7:6b:
                    31:0b:ab:e0:b0:2b:59:65:3f:ba:b3:97:e6:73:fd:
                    3e:f1:51:ad:ab:62:62:31:d7:1b:01:e7:93:ba:d9:
                    a2:e0:a1:1c:de:ca:dc:17:b7:7b:ee:50:1c:68:40:
                    97:71:d6:dc:6e:f7:0f:e7:ec:d7:8f:55:ed:b4:05:
                    86:a8:28:f8:ce:10:aa:34:36:23:2d:c1:75:16:bd:
                    c1:78:e7:24:f4:fe:f6:6d:05:52:4e:b4:2d:2b:a5:
                    15:82:90:e1:8c:d4:09:3c:9d:0d:49:99:0c:af:d1:
                    b7:69:0d:04:37:92:c6:b0:87:cd:7b:ae:a6:10:f0:
                    e5:a2:ab:33:1e:e7:90:22:47:2a:ed:ca:27:1c:fd:
                    70:d8:18:8a:c8:d9:96:57:e1:7e:5e:79:02:a6:b7:
                    11:f4:7e:a7:37:5b:1f:a5:9a:71:92:76:3a:96:2c:
                    97:78:9f:3a:26:82:e7:0b:cc:ca:e2:b0:d9:d2:4e:
                    f0:7c:2e:0b:eb:17:49:f4:6f:9d:85:85:dc:87:9d:
                    c4:97:d7:ae:5d:74:e1:96:ef:74:17:ab:df:ea:2a:
                    b6:3f:15:4c:8d:36:91:d4:68:3d:03:7e:2a:52:0c:
                    50:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:E6:6B:1C:9E:B0:16:BA:EA:95:FB:2D:FE:5C:EE:E5:F4:90:C7:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31/2eb533dd-af48-3036-afe1-a1d4ebc0f702.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31/6c0836c5-0c38-41a2-917d-c9df009f1a31.crl

            X509v3 Authority Key Identifier:
                keyid:8E:80:0D:8E:4D:40:B5:8B:65:6F:70:EE:C6:05:6F:BB:47:39:00:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.108.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:fa:5e:8b:d3:91:b1:74:fe:29:e8:1c:ae:60:ac:8e:b3:ea:
         e2:83:30:60:43:98:0e:14:d4:ac:34:b3:47:b1:97:e4:8b:f5:
         ec:80:1b:de:2d:10:a3:0c:38:e9:53:cb:db:c2:b6:c3:a6:77:
         74:c7:4a:a2:38:91:44:ee:f1:8f:0c:6b:54:aa:40:11:85:b8:
         b9:c6:e6:02:1f:26:fe:c1:3e:6b:fa:c8:19:7b:44:34:ca:13:
         2e:90:4f:eb:39:ef:0a:31:c3:97:33:fd:60:5c:83:ae:85:6c:
         42:97:5d:f1:7a:95:07:cf:d8:18:7a:8a:2b:c1:78:0b:45:e5:
         bd:55:cd:87:28:1b:4c:8b:f5:c7:8a:c3:b0:90:44:a2:85:17:
         a7:e9:77:4a:8b:55:fa:92:9f:34:79:fe:38:5c:7d:06:f1:a0:
         ff:95:6f:29:e5:43:be:a5:4f:34:e2:fa:ef:66:97:34:dc:85:
         fe:a0:85:1b:ce:9d:99:50:11:03:a3:98:d1:8c:40:c5:c9:1a:
         27:9a:48:a8:75:ee:ee:d2:d7:68:d4:7b:70:4a:55:8f:38:a8:
         19:cc:c1:7c:da:04:6d:96:32:df:43:95:6e:29:fb:21:a1:53:
         af:80:06:78:a3:df:96:a1:9c:16:e0:52:2e:1c:8a:d4:78:73:
         ef:57:51:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 15:53:50 2025 by rpki-client